fix(eip712): address security findings

- v1_set_array: reject re-entry when array_remaining > 0 but
  array_levels_remaining == 0; prevents re-opening a leaf-level
  array frame that is still consuming elements

- filtering handlers: add `if (discarded) return true;` at the
  start of the Handling section in all ten filter handlers that
  were missing the guard (filtering_calldata_{spender,amount,
  selector,chain_id,callee,value}, filtering_trusted_name,
  filtering_date_time, filtering_amount_join_{token,value});
  filtering_raw_field was already the only correct one

- ui_712_start_review: call set_tx_simulation_warning() before
  ui_tx_simulation_finish_str() so the finish button label
  reflects the actual simulation verdict

(cherry picked from commit 39e0ec87441425a9b7dbfa75640875754668ad5c)